twzrd-x402-gate@0.11.0
Security fixes: payment-verdict integrity issues fixed through 0.11.4 (see the 0.11.2, 0.11.3 and 0.11.4 changelogs). Upgrade to twzrd-x402-gate@0.11.4.
Released identity 0.11.0. Buyer-side x402 trust gate: free preflight before signing USDC to a merchant. On Solana mainnet and Base mainnet (eip155:8453), a missing payTo is not approved, a buyer preflight outage does not sign unless TWZRD_FAIL_OPEN=true,
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package has no install-time attack identified, and the risky payment flow requires explicitly running its CLI. However, its safe-fetch adapter documents that a changed second challenge may be paid without a fresh check, so the payment preflight does not reliably protect that flow.
Decision evidence
public snapshot- The safe-fetch CLI explicitly documents a TOCTOU gap: it checks one payment challenge, then AgentCash may fetch and sign a different one without rechecking.
- After preflight, safe-fetch invokes AgentCash to make the paying request; the default command uses npx with agentcash@latest.
- The package’s only lifecycle script shown is prepublishOnly, not an install hook.
- The TOCTOU limitation is explicitly documented in the source, which calls the adapter advisory rather than a challenge-bound firewall.
- The paying flow runs through the explicitly invoked safe-fetch CLI; the package entry point exports functions without invoking them.
- Delivery capture has a documented opt-out and sends payment observation fields rather than response bodies.
Source & flagged code
5 flaggedPackage source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5Package source references dynamic require/import behavior.
bin/twzrd-gate-eval-refuse.jsView on unpkg · L28Findings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.11.0.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.11.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.